1. (previously presented) A method for controlling the use of data on a device by 
a user, comprising the steps of: 

issuing a smart card to the user by a first party, wherein a private key which is 
assigned to the user is stored on the smart card, wherein the private key is usable but not 
known by the user and the private key can not be used until the card is activated by 
authenticating that the user is authorized to use the smart card; 

encrypting data to be sent to the user using a public key assigned to the user 
before distributing the data to the user; and 

after distribution of the data to the user, prompting the user to enter a private key 
each time the user wants to use the data, wherein the user inserts the smart card into a 
smart card reader connected to the device and activates the smart card, wherein the 
device decrypts the encrypted data using the private key. 

2. (previously presented) The method according to claim 1, wherein the smart 
card is a credit card. 

3. (previously presented) The method according to claim 1, wherein the smart 
card is an identification card. 

4. (previously presented) The method according to claim 1, wherein the data is 
digital information comprises one of computer software, music, literature, audio and/or 
video information. 



5. (cancelled) 



6. (currently amended) The method according to claim & I, wherein the 
asymm e tric public key for the user is obtained from the user. 

7. (currently amended) The method according to claim & I, wherein the 
asymm e tric public key for the user is obtained from a public database. 

8. (previously presented) The method according to claim 1, wherein the user 
authenticates the smart card by entering a personal identification number code. 

9. (previously presented) The method according to claim 1, wherein the user 
authenticates the smart card by entering a biometric identification code. 

10. (previously presented) The method according to claim 1, wherein a processor 
in the smart card decrypts the encrypted data using the private key. 

1 1 . (previously presented) A method for controlling the use of data on a device 
by a user, comprising the steps of: 

issuing a smart card to the user by a first party, wherein a first private key which 
is assigned to the user is stored on the smart card, wherein the first private key is usable 
but not known by the user and the first private key can not be used until the card is 
activated by authenticating that the user is authorized to use the smart card; 



obtaining at least a second set of public and private keys and storing the at least 
second private key on the smart card; 

encrypting data to be sent to the user using a first public key assigned to the user 
and the second public key before distributing the data to the used; and 

after distribution of the data to the user, prompting the user to enter the first and at 
least second private keys each time the user wants to use the data, wherein the user 
inserts the smart card into a smart card reader connected to the device and activates the 
smart card, wherein the device decrypts the encrypted data using the first and at least 
second private keys. 

12. (previously presented) The method according to claim 11, wherein the smart 
card is a credit card. 

13. (previously presented) The method according to claim 11, wherein the smart 
card is an identification card. 

14. (previously presented) The method according to claim 1 1, wherein the data is 
digital information comprises one of computer software, music, literature, audio and/or 
video information. 

15. (cancelled) 



16. (currently amended) The method according to claim U, wherein the 
asymmetric public keys for the user is obtained from the user. 

17. (currently amended) The method according to claim 44 U_, wherein the 
asymmetric public keys for the user is obtained from a public database. 

18. (previously presented) The method according to claim 1 1, wherein the user 
authenticates the smart card by entering a personal identification number code. 

19. (previously presented) The method according to claim 1 1, wherein the user 
authenticates the smart card by entering a biometric identification code. 

20. (previously presented) The method according to claim 11, wherein a 
processor in the smart card decrypts the encrypted data using the private key. 

21 . (currently amended) A method for controlling the use of data on a device by 
a user, comprising the steps of: 

encrypting data to be sent to the user using at least one public key assigned to the 
user before distributing the data to the user; 

after distribution of the data to the user, prompting the user to enter at least one 
private key each time the user wants to use the data, wherein the at least one private key 
is stored on a smart card and the at least one private key is usable but not known by the 
user and the at least one private key can not be used until the card is activated by 



authenticating that the user is authorized to use the smart card, wherein the user inserts 
the smart card into a smart card reader connected to the device and activates the smart 
card, wherein the device decrypts the encrypted data using the private key. 

22. (previously presented) The method according to claim 21, wherein the smart 
card is a credit card. 

23. (previously presented) The method according to claim 21, wherein the smart 
card is an identification card. 

24. (previously presented) The method according to claim 2 1 , wherein the data is 
digital information comprises one of computer software, music, literature, audio and/or 
video information. 

25. (cancelled) 

26. (currently amended) The method according to claim 2$ 21, wherein the 
asymm e tric public key for the user is obtained from the user. 

27. (currently amended) The method according to claim 2$ 21, wherein the 
asymm e tric public key for the user is obtained from a third party. 



28. (previously presented) The method according to claim 21, wherein the user 
authenticates the smart card by entering a personal identification number code. 

29. (previously presented) The method according to claim 21, wherein the user 
authenticates the smart card by entering a biometric identification code. 

30. (previously presented) The method according to claim 21, wherein the user 
knows all of the private keys except for one private key. 

31. (previously presented) The method according to claim 21, wherein a 
processor in the smart card decrypts the encrypted data using the private key. 

32. (currently amended) A method for controlling the use of data on a device by 
a user, comprising the steps of: 

encrypting data to be sold to the user by a seller using at least one public key 
assigned to the user before distributing the data to the user; and 

after distribution of the data to the user, prompting the user to enter at least one 
private key each time the user wants to use the data, wherein the at least one private key 
is stored on a smart card and the at least one private key is usable but not known by the 
user and the at least one private key can not be used until the card is activated by 
authenticating that the user is authorized to use the smart card, wherein the user inserts 
the smart card into a smart card reader connected to the device and activates the smart 
card, wherein the device decrypts the encrypted data using the private key. 



